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IN THE CLAIMS 

This listing of the claim will replace all prior versions and 
claim in the present application. 
Listing of Claims 

Claims 1-22 (canceled). 

23. (currently amended)A public-key cryptographic 
implemented in a computer system seheme-comprising: 
a key generation step of generating a secret-key: 

and a public-key: 

« G> : finite (multiplicative) group GQO^ 

• q : prime numb^ (the order of G) 

€ G 

• c = gi^'^g^'^, di = gi^^g2^\ <fe = gi^^gz^, h = pi*, 

• ^ iXixX^xM — ¥ & : one-to-one mapping 

• ff-i : Im(7r) — 4^ Xi x Jf, x Af 
where the group G is a partial group of the group G', Xi and X2 are an infinite 

set of positive integers which satisfy: 

where M is a plaintext space; 

a ciphertext generation and transmission step of selecting random 
numbers OieXi, 026X2. reZq for a plaintext m (m e M), calculating: 

Where a = oi || 02, and transmitting (ui, U2. e, v) as a ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
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received ciphertext and by using the secret key, a'l. 02, m* (a'lgXi, a2eX2, 
m eM) which satisfy: 

and if the following is satisfied: 

outputting m' as the deciphered results (where a' « a'l )| a^). whereas if rK)t 
satisfied, outputting as the decipher results the effect that the received 
ciphertext is rejected. 

24. (currently amended)A publtc-key cryptographic method schem e 
comprising: 

a key generation step of generating a secret-key: 
and a public-key: 

• 9 - prime number (q is a prime factor of p-I) 

• ffi,P2 € Zp : ardp(^) = ordp(^) = Q 

• c = pi**p2*^ mod p, d\ — 9x^^92^^ mod J9> 43 « ^t«ii^t«9 h = gi* mod p, 

• *i,*2»*3 : positive constant (io**+*» < q, 10** < ff, lO*i+*a+*3 < p) 

a ciphertext generation and transmission step of selecting random 
numbers a = ai || a2 (|ai| = ki. |a2| = k2) for a plaintext m (|m| = ka, where |x| is 
a_the-number of digits of x), calculating: 

m = oc\\K 
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selecting a random number r^Zq, calculating: 

ui = gi' mod p, ii2 = 52' niod p, e^n^ bT mod p, v = gi^^c^di^d2^ mod p 

arKi transmitting (ui, U2, e, v) as a ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key. a'l. 0*21 m' (|aM = ki, |o*2| ° k2, 
|m'| - ks) which satisfy: 

and if the following ia satisfied: 

outputting m' as the deciphered results (where a' = a'i || 0*2)^ whereas if not 
satisfied, outputting as the decipher results the effect that the received 
ciphertext is rejected. 

25, (cunrently amended) A public-key cryptographic methodseheme 
according to claim 423. wherein the public-key is generated by a receiver and 
is made public. 

26, (cunrently amended)A public-key cryptographic schomo m eHTod 
according to claim 423. wherein in said ciphertext transmission step, the 
random numbers QieXi. a2e^2 ^nd reZq are selected beforehand and the 
following is calculated and stored beforehand: 
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27, (currently amended)A public-key cryptographic method s chomo 
according to claim 224, wherein in said ciphertext transmission step, the 
random numbers Oi, 02 (|ai| = ki, |a2| ~ k:^), and reZq are selected t^eforehand 
and the following is calculated and stored beforehand: 

«*i = gi" mod p, U2 — fla*' mod hT mod p, pi"*c^di°"' mod p 



28. (currently amended)A cryptographic communication metlTod 
implemented in a computer system comprising: 

a key generation step of generating a secret-key: 

and a public-key: 

• 0,CP : finite (multiplicative) group GQG' 

• Q : prime nimiber (the order of G) 

• IT : Xi X X2 X Af — > & : one-to-one mapping 

• TT"* : Im(fr) — ► xX2^ M 

m E : symmetric encipher function 

where the group G is a partial group of the group G', Xi and X2 are an infinite 
set of positive integers which satisfy: 

ai||a2 < q (V^i € Xi, Va2 € X2) 

where M is a key space; 

a dphertext generation and transmission step of selecting random 
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numbers aieXi. a2eX2» reZq for key data K (K e M). calculating: 

Where a = oi || 02, generating a ciphertext C of transmission data m by: 

C = EKim) 

by using a (symmetric cryptographic function E and key data and 
transmitting (ui, ua, e, v. C) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a'i, 0*2, (a*ieXi, 0*20X2, 
K^M) which satisfy: 

and if the following is satisTied: 

where a' = o'l || a'2 

executing a decipher process by: 

outputting deciphered results. v\^ereas if not satisfied, outputting as the 
decipher results the effect that the received ciphertext is rejected. 

29. (currently amended)A cryptographic communication method 
I according to claim 628, wherein the ciphertext C is generated by: 
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C = EK(ncci,a2)\\m) 

by using a symmetric cryptographic function the key data K and a 
publicized proper function f, it is checked whether the following is satisfied: 

/(c4,ai) = [£)^.(C)]* 

where f outputs a value of k bits and [x]^ indicates the upper k bits of x, and if 
the check passes, a decipher process is executed by: 

where [xY^ indicates a bit train with the upper k bits of x being removed. 

30. (currently amended) A cryptographic communication method 
implemented in a computer svstem comprising: 

a key generation step of generating a secret-key: 

• xi»2;2,yii,yi2» 2/317 S/22>^ € 

and a public^key: 

^PfQ ' prime number (q is a prime factor of p-1) 

• gif92 6 Zp : otdpigi) = ordpQ^) = g 

• c = pi**fla*' mod p, rfi = ^*^*p2*^ mod p, da — naod p, A = pi* mod 

• hxMM ' positive constant <10*i+** < g, 10** < q, i0*i+*i+*3 < p) 
m E : symmetric enciph^ function 

a ciphertext generatton and transmlsston step of selecting random 
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numbers a = at || az (|ai| = ki, [cxzl = k2) for key data K (|K| = ka, wher© |x| is a 
*e-number of digits of x). calculating: 

m =a||iC 

selecting a random number r^Zq, calculating: 

ui = gi' mod p, U2=g2^ mod p, e = m fe' mod p, v= gt^^c^di^d2^^ mod p 
and generating a ciphertext C of transmission data by: 

C = EKim) 

by using a (symmetric) cryptographic function E and the key data K, and 
transmitting (ui, U2, e. v, C) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, aS, a 2, K' (|a'i| = ki, 102! = kz, 
|K'| = k3) which satisfy: 

ailKlliif' e/ui' modp 
and if the following is satisfied: 

where a* = a*i || 02. 

executing a decipher process by: 

m = Dir/(C) 

outputting deciphered results, whereas if not satisfied, outputting as the 
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decipher results the effect that the received ciphertext is rejected. 

31. (currently amended) A cryptographic communication method 
according to claim 830, wherein the ciphertext C is generated by: 

C = £Ar(/(ai,a3)||m) 

by using a symmetric cryptographic function E, the key data K and a 
publicized proper function f. it is checked NA^ether the following Is satisfied: 

/(«i.c/a) = [i>K'(C?))* 

where f outputs a value of k bits and [x]^ indicates the upper K bits of x, and if 
the check passes, a decipher process is executed by: 

m = [i?Ar'(C)J-* 

where [x]^ indicates a bit train with the upper k bits of x being removed. 

32. (currently amended)A cryptographic communication method 
according to claim 623, wherein the public-key is generated by a receiver and 
is made public. 

33. (cun-ently amended)A cryptographic communication method 
according to claim €23, wherein in said dphertext transmission step, the 
random numbers Oi, Q2 (oieXi. 026X2) and rgZq are selected beforehand and 
the following is calculated and stored beforehand: 
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34. (currently amended)A cryptographic communication method 
according to claim 628> wherein in said ciphertext transmission step, the 
random numbers at, 02 (jail = ki, \az\ = k2) and reZq are selected beforehand 
and the following is calculated and stored beforehand: 

= gi" mod p, U2== §2^ mod mod p, gi^^ c^di^^ mod p 

35. (currently amended)A cryptographic communication method 
Implemented in a computer system comprisinQ: 

a key generation step of generating a secret-key: 

and a public-key: 

• (7, C : finite (multiplicative) group <7 C 

• g : prime number (the order of G) 

• c = Pl"^»pa*^ d = giv^gi^, h = 

• TT : JTi X Jf2 X M — > Dom(£r) : one-to-one mapping 

(Dom(H) IS the domain of the function £) 

• ir-^ : Im(ff) — ^XixX^xM 

• H : hash function 

• E : symmetric encipher function 

where the group G is a partial group of the group G*. Xi and X2 are an Infinite 
set of positive integers which satisfy: 
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a dphertext generation and transmission step of selecting random 
numbers aieXi, azeXa. teZq, calculating: 

where a = ai || 02, generating a ciphertext C of transmission data m by 

C = ^ic(ir(ofi,a2,*»)) 

by using a (symmetric) cryptographic function E; and transmitting (ui, U2, v, C) 
as the dphertext; and 

a ciphertext reception and decipher step of calculating: 

by using the secret key, calculating from the received ciphertext, a'l, a 2 
(where a'ieXi o'2cX2) which satisfy: 

ir(ofi»ai,mO-r>K'(C^) 
if the following is satisfied: 

where tf = a'l || 02 

outputting m' as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected. 
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36. (currently amended) A cryptographic communication method 
implemented in a computer system comprising: 

a key generation step of generating a secret-l<ey: 

and a public-key: 

^PtQ ' prime number (q is a prime &ctor of p-l) 

• 91^92 € Zp : oxdp(M) = <^(if2) = Q 

• c ss i^i**fl2** mod Pt d = gi^g2^ tood p, A = pi* mod p, 

• kiMffoA ' positive constant (lO*»+*» < 10** < q, 10*»+*a+*a < p) 

• H : bash function 

• E : symmetric encipher fimction (the domain of £ is all positive integers) 

a ciphertext generation and transmission step of selecting random 
numbers a = oi || a2 (|ai| = ki, I02I ka, where (|x| is the number of digits of x), 
selecting a random number r^Zq, calculating: 

til — Pi*" mod p, «2 = pa'' i»od p, v = pi°*c^d^ mod p» K^If{hr mod p) 

transmitting the ciphertext (ui» U2, v, C); generating a ciphertext C of 
transmission data m by: 

C = ^x(ai||a2|im) 

by using a (symmeteic) cryptographic function, and transmitting (ui. U2, v, C) 
as the ciphertext; 

a ciphertext receptk)n and decipher step of calculating: 

A" = J5r(t*i*modp) 
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by using the secret key, calculating from the received ciphertext, a*i, 0*2 (|cxM 
= ki, |a 2I = kz) which satisfy: 

and if the following is satisfied: 

^'*itti*»+°^»»tt2'^+«'«« = V (mod p) 

outputting m* as the deciphered results (where a' - a'l || 02), whereas if not 
satisfied, outputting as the decipher results the effect that the received 
ciphertext is rejected . 

37. (currently amended)A cryptographic communication method 
according to claim wherein the public-key is generated by a receiver 
and is made public. 

38. (currently amended)A cryptographic communication mettiod 
according to claim 4^25. wherein in said ciphertext transmission step, the 
random numt>ers ai, 02 (oieXi, 020X2) and r^Zq are selected beforehand and 
the ui, U2. e and v are calculated and stored beforehand. 

39. (currently amended) A cryptographic communication method 
according to claim 4 436. wherein in said ciphertext transmission step, the 
random numbers Oi» 02 (|Oi) " ki, |a2| " k2). and reZq are selected beforehand 
and the Ui, U2, e and v are calculated and stored beforehand. 
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40. (currently amended)A cryptographic communication method 
implemented jn a computer system comprising: 

a key generation step of generating a secret-key: 

• : (asymmetric cryptography) decipher key 
and a public-key: 

• G : finite (multiplicative) group 
mq: prime number (the order of G) 

• 91^92 € G 

• ir:Xi xX2xM— >Dom(-B) : ^SP'^jSi^?^^^^ - ^ ^ . 

(Dom(E) IS the domain of the function H) 

• IT"* : Im(7r) — ► JCi X JCa X M 

• ^F*(0 • (asymmetric cryptography) enciph^ function 

where the group G is a partial group of the group G', Xi and Xz are an infinite 
set of positive integers which satisfy: 

tti||tt2 < q (Vai € Xu Vag € X2) 

where M is a plaintext space; 

a dphertext generation and transmission step of selecting random 
numbers QieXi. a2eX2. feZq, calculating: 

where a = Oi || 02, generating a dphertext C of transmission data m by: 
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by using an (asymmetric) cryptographic function EpK, and transmitting (ui, U2. 
e, v) as the cipliertext; and 

a ciphertext reception and decipher step of calculating from the 
received dphertext and by using the secret key, a'l, a2> m' (a'leXi, a'2eX2. 
m elVI) which satisfy: 

and if the following is satisfied: 
where: 

outputting m' as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected. 



41. (currently amended)A cryptographic communication method 
implemented in a computer system c omprising: 

a key generation step of generating a secret-key: 

# sk : (asymmetric cryptography) 
decipher key 

and a public-key: 



^PyQ ' prime number (q is a prime factor of p-1) 

• i^,52 € 2p : ordp(^i) = ordp(g2) = q 

• c = gi^^g2''^ mod p, d = ffi^^g^^ mod p, 

• fci>fe : positive constant (10*^+*^ < g) 

• -^ifc(0 • (asymmetric cryptography) encipher function 

(the domain is all posl^e mtegm) 
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a ciphertext generation and transmission step of selecting random 
numbers a = oi || 02 (|ai| = ki, |a2| = ka, where |x| is the number of digits of x), 
selecting a random number reZq. calculating: 

ui = gi" mod p, U2 = mod p, v = gi^'^c^d^ mod p 

generating a ciphertext C of transmission data m (positive integer) by: 
e = Epkiai\\a2\\m) 

by using the secret key, and transmitting (ui, U2. e, v) as the ciphertext; and 

a ciphertext reception and decipher step of calculating from the 
received ciphertext and by using the secret key, a'l, 0*2* m' (|a'i| = ki, |a*2| = k2, 
m' is a positive integer) whic^ satisfy: 

and if the following is satisfied: 

where: 

outputting m' as the deciphered results, whereas if not satisfied, outputting as 
the decipher results the effect that the received ciphertext is rejected. 

. 42. (currently amended)A cryptographic communication method 
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according to claim 4640. wherein the public-key is generated by a receiver 
and is made public. 

43. (currently amended)A cryptographic communication method 
according to claim 4^0. wherein in said ciphertext transmission step, the 
random numbers ciz (oieXi, 020X2) and reZq are selected beforehand and 
the Ui, U2 and v are calculated and stored beforehand. 

44. (currently amended)A cryptographic communication method 
according to claim 4941. wherein in said ciphertext transmission step, the 
random numbers oi, 02 (|oi| = ki, |a2| = k2). and reZq are selected t>eforehand 
and the ui, U2 and v are calculated and stored beforehand. 
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